JSPM

  • Created
  • Published
  • Downloads 501
  • Score
    100M100P100Q84868F
  • License MIT

Comprehensive Model Context Protocol server for WordPress management with 59 tools, performance monitoring, intelligent caching, auto-generated documentation, Docker support, TypeScript, and production-ready authentication

Package Exports

  • mcp-wordpress
  • mcp-wordpress/dist/index.js

This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (mcp-wordpress) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.

Readme

๐Ÿš€ MCP WordPress Server

WordPress MCP Logo

The Most Comprehensive WordPress MCP Server

Manage WordPress sites with natural language through AI tools like Claude Desktop

Quick Start โ€ข Features โ€ข Installation โ€ข Documentation โ€ข Examples

CI/CD Pipeline NPM Version NPM Downloads Test Coverage Test Results MCP Evaluation

TypeScript Security Tests Vulnerabilities Penetration Testing Docker License smithery badge

๐ŸŽฏ Why This MCP Server?

Transform WordPress management from complex admin panels to simple conversations:

โŒ Before: Login โ†’ Admin Panel โ†’ Navigate โ†’ Click โ†’ Fill Forms โ†’ Save
โœ… After:  "Create a new blog post about AI trends with SEO optimization"

Key Advantages:

  • ๐Ÿ† Most Complete: 59 tools vs 20-30 in alternatives
  • โšก Fastest Setup: 2-click Claude Desktop installation via DXT
  • ๐Ÿ”’ Production Ready: 207 tests, security audited, battle-tested
  • ๐ŸŽฏ TypeScript Native: 100% type safety, best-in-class developer experience
  • ๐ŸŒ Multi-Site: Manage unlimited WordPress sites from one place

๐Ÿš€ Quick Start

Get up and running in under 5 minutes:

Prerequisites

  • WordPress: Version 5.6+ with REST API enabled
  • Claude Desktop: Latest version installed
  • Application Password: Generated from WordPress admin panel

3-Step Setup

1๏ธโƒฃ Generate WordPress Application Password

WordPress Admin โ†’ Users โ†’ Profile โ†’ Application Passwords โ†’ Add New

2๏ธโƒฃ Install MCP Server (Choose One)

Option A: DXT Extension (Easiest)

# Download and install in Claude Desktop
curl -L https://github.com/docdyhr/mcp-wordpress/raw/main/mcp-wordpress.dxt -o mcp-wordpress.dxt
# Then: Claude Desktop โ†’ Extensions โ†’ Install โ†’ Select DXT file

Option B: NPM Global Install

npm install -g mcp-wordpress

3๏ธโƒฃ Test Your Connection

In Claude: "Test my WordPress connection"
Response: "โœ… Authentication successful! Connected to: Your Site Name"

๐Ÿ“บ Watch 2-minute Setup Video | ๐Ÿ“– Detailed Setup Guide

โšก Installation Options

Easiest installation - just 2 clicks!

  1. Download: mcp-wordpress.dxt (2.6MB)
  2. Install: Claude Desktop โ†’ Extensions โ†’ Install โ†’ Select DXT file
  3. Configure: Enter your WordPress site URL and credentials

โœ… Zero command line required
โœ… Automatic updates
โœ… Built-in security

๐Ÿ“– Complete DXT Setup Guide โ†’

๐Ÿš€ Alternative: NPX (Power Users)

# Run directly - always latest version
npx -y mcp-wordpress

# Interactive setup wizard
npm run setup

๐Ÿ“ฆ Secondary: Smithery Package Manager

# Install via Smithery (MCP package manager)
smithery install mcp-wordpress

# Configure and start
smithery configure mcp-wordpress

โœ… Package management
โœ… Version control
โœ… Easy updates

Installing via Smithery

To install mcp-wordpress for Claude Desktop automatically via Smithery:

npx -y @smithery/cli install @docdyhr/mcp-wordpress --client claude

๐Ÿ”ง Other Options

๐ŸŒŸ What Makes This Special

๐Ÿ† Feature Comparison

Feature This Server Competition
Tools Available 59 tools 20-30 tools
Claude Desktop DXT โœ… 2-click install โŒ Manual setup
Multi-Site Support โœ… Unlimited sites โŒ Single site
TypeScript โœ… 100% coverage โš ๏ธ Partial/None
Performance Monitoring โœ… Real-time analytics โŒ Basic only
Test Coverage โœ… 207 tests (100%) โš ๏ธ Limited
Production Ready โœ… Security audited โš ๏ธ Unknown

๐Ÿš€ Core Capabilities

WordPress Management

  • 59 WordPress Tools across 10 categories
  • Multi-Site Support - Manage unlimited WordPress installations
  • Flexible Authentication - App Passwords, JWT, Basic Auth, API Key
  • Real-Time Sync - Instant updates across all connected tools

Performance & Reliability

  • โšก Intelligent Caching - 50-70% performance improvement
  • ๐Ÿ“Š Real-Time Monitoring - Performance metrics and optimization insights
  • ๐Ÿ”’ Production Ready - Security-reviewed, 95%+ test coverage
  • ๐Ÿ”„ Zero Downtime - Graceful error handling and automatic recovery

Developer Experience

  • 100% TypeScript - Complete type safety and IntelliSense
  • ๐Ÿณ Docker Support - Production-ready containerization
  • ๐Ÿ“š Auto-Generated Docs - API documentation with live examples
  • ๐Ÿ”ง Extensible - Custom tool development framework

๐ŸŒ Multi-Site Configuration

Perfect for agencies and developers managing multiple WordPress sites:

{
  "sites": [
    {
      "id": "main-site",
      "name": "Main WordPress Site",
      "config": {
        "WORDPRESS_SITE_URL": "https://site1.com",
        "WORDPRESS_USERNAME": "admin",
        "WORDPRESS_APP_PASSWORD": "xxxx xxxx xxxx xxxx xxxx xxxx"
      }
    },
    {
      "id": "client-blog",
      "name": "Client Blog",
      "config": {
        "WORDPRESS_SITE_URL": "https://client-blog.com",
        "WORDPRESS_USERNAME": "editor",
        "WORDPRESS_APP_PASSWORD": "yyyy yyyy yyyy yyyy yyyy yyyy"
      }
    }
  ]
}

Use with site parameter: wp_list_posts --site="main-site"

๐Ÿ“– Complete Multi-Site Setup Guide

๐Ÿ” Authentication Setup

  1. WordPress Admin โ†’ Users โ†’ Profile
  2. Scroll to Application Passwords
  3. Enter name: "MCP WordPress Server"
  4. Click Add New Application Password
  5. Copy the generated password

Alternative Methods

  • JWT Authentication - With JWT plugin
  • Basic Authentication - Username/password (dev only)
  • API Key Authentication - With API Key plugin

๐Ÿ“– Complete Authentication Guide

๐Ÿ“‹ Available Tools (59 Tools)

Content Management

  • ๐Ÿ“ Posts (6 tools) - Create, edit, delete, list posts and revisions
  • ๐Ÿ“„ Pages (6 tools) - Manage static pages and revisions
  • ๐Ÿ–ผ๏ธ Media (6 tools) - Upload, manage media library and files

User & Community

  • ๐Ÿ‘ฅ Users (6 tools) - User management and profiles
  • ๐Ÿ’ฌ Comments (7 tools) - Comment moderation and management
  • ๐Ÿท๏ธ Taxonomies (10 tools) - Categories and tags management

Site Management

  • โš™๏ธ Site Settings (7 tools) - Site configuration and statistics
  • ๐Ÿ” Authentication (6 tools) - Auth testing and management
  • โšก Cache Management (4 tools) - Performance caching control
  • ๐Ÿ“Š Performance Monitoring (6 tools) - Real-time metrics and optimization

๐Ÿ“– Complete Tool Documentation | Live API Reference

๐Ÿค– Claude Desktop Integration

๐ŸŽฏ Real-World Use Cases

Content Creation & Management:

๐Ÿ’ฌ "Analyze my top 10 blog posts and create a new post about emerging trends"
๐Ÿ’ฌ "Upload these 5 images and create a photo gallery page with SEO optimization"
๐Ÿ’ฌ "Review all pending comments and approve the legitimate ones"

Site Management & Analytics:

๐Ÿ’ฌ "Check my WordPress site performance and provide optimization recommendations"
๐Ÿ’ฌ "Create a new user account for my freelance writer with editor permissions"
๐Ÿ’ฌ "Backup my site settings and show me cache performance statistics"

Bulk Operations:

๐Ÿ’ฌ "Update all posts from 2023 to include my new author bio"
๐Ÿ’ฌ "Find all images over 1MB and suggest compression strategies"
๐Ÿ’ฌ "List all users who haven't logged in for 6 months"

โš™๏ธ Configuration Methods

No configuration needed - built-in secure credential management!

Option 2: NPX in Claude Desktop

{
  "mcpServers": {
    "mcp-wordpress": {
      "command": "npx",
      "args": ["-y", "mcp-wordpress"],
      "env": {
        "WORDPRESS_SITE_URL": "https://your-site.com",
        "WORDPRESS_USERNAME": "your-username",
        "WORDPRESS_APP_PASSWORD": "your-app-password"
      }
    }
  }
}

๐Ÿ“– Complete Integration Guide

๐Ÿ“š Examples

Basic Content Management

Create and Publish a Blog Post

You: "Create a new blog post titled 'AI Revolution in 2024' with content about recent AI breakthroughs"
Claude: "I'll create that blog post for you..."
Result: โœ… Post "AI Revolution in 2024" created successfully (ID: 123)

Media Management

You: "Upload the image at /path/to/image.jpg and set it as featured image for post 123"
Claude: "I'll upload that image and set it as the featured image..."
Result: โœ… Image uploaded (ID: 456) and set as featured image

Advanced Workflows

SEO-Optimized Content Creation

You: "Create an SEO-optimized blog post about 'WordPress Security Best Practices' with:
     - Focus keyword: 'WordPress security'
     - Meta description
     - Proper heading structure
     - At least 1500 words"
     
Claude: "I'll create a comprehensive SEO-optimized post on WordPress security..."

Bulk Operations

You: "Find all draft posts older than 30 days and provide a summary"
You: "Update all posts in category 'News' to include a disclaimer at the end"
You: "Delete all spam comments from the last week"

Site Management

Performance Monitoring

You: "Analyze my site's performance and suggest optimizations"
Claude: "Let me check your site's performance metrics...
         - Cache hit rate: 67%
         - Average response time: 245ms
         - Recommendations: Enable object caching, optimize images..."

User Management

You: "Create a new editor account for john@example.com with a secure password"
You: "List all users who haven't logged in for 90 days"
You: "Update Sarah's role from Author to Editor"

Multi-Site Management

Working with Multiple Sites

You: "List all posts from my client-blog site"
Claude: "I'll list the posts from the client-blog site..."

You: "Compare traffic between main-site and client-blog"
Claude: "Here's a comparison of both sites..."

๐Ÿ“– More Examples | Use Case Library

๐Ÿงช Testing & Status

Current Test Status โœ…

  • Main Test Suite: 207/207 passed (100%)
  • Security Tests: 40/40 passed (100%)
  • Performance Tests: 8/8 passed (100%)
  • CI/CD Pipeline: Fully functional

Test Your Installation

# Check connection status
npm run status

# Run full test suite
npm test

# Quick validation
npm run test:fast

๐Ÿ”’ Security Status

Comprehensive Security Testing

Our security posture is continuously monitored through automated testing and vulnerability scanning:

Security Area Status Tests Coverage
XSS Protection โœ… Secure 6/6 passing Script injection, URL validation, HTML sanitization
SQL Injection โœ… Secure 3/3 passing Query parameterization, input validation
Path Traversal โœ… Secure 3/3 passing File path validation, directory restrictions
Input Validation โœ… Secure 9/9 passing Length limits, format validation, sanitization
Authentication โœ… Secure 7/7 passing Bypass prevention, token validation
Rate Limiting โœ… Secure 3/3 passing DoS protection, request throttling
Information Disclosure โœ… Secure 2/2 passing Error sanitization, sensitive data protection
Penetration Testing โœ… Secure 12/12 passing Comprehensive attack simulation

Security Features

  • ๐Ÿ›ก๏ธ Input Sanitization: All user inputs are validated and sanitized
  • ๐Ÿ” Authentication Security: Multi-method auth with bypass prevention
  • โšก Rate Limiting: Built-in protection against abuse and DoS attacks
  • ๐Ÿ” Vulnerability Scanning: Daily automated security scans
  • ๐Ÿ“Š Real-time Monitoring: Continuous security status updates
  • ๐Ÿšจ Automated Alerts: Immediate notification of security issues

Security Testing Commands

# Run comprehensive security tests
npm run test:security

# Run penetration testing suite
npm run test:security:validation

# Security vulnerability audit
npm audit

# Full security validation
npm run security:full

Security Compliance

  • OWASP Top 10: Complete protection against common vulnerabilities
  • CVE Monitoring: Automated scanning for known vulnerabilities
  • Security Headers: Proper HTTP security headers implementation
  • Data Protection: Sensitive credential redaction and secure storage
  • Access Control: Role-based permissions and authentication validation

๐Ÿ“– Complete Security Documentation | Security Test Results

๐Ÿ› Troubleshooting

Common Issues

  1. "Cannot connect to WordPress"

    • Verify WORDPRESS_SITE_URL
    • Test REST API: curl https://your-site.com/wp-json/wp/v2/
  2. "Authentication failed"

    • Check username and application password
    • Ensure Application Passwords are enabled
    • Run npm run setup to reconfigure
  3. "Tools not appearing in Claude"

    • Restart Claude Desktop after configuration
    • Check Claude Desktop config file format

Get Help

# Debug mode
DEBUG=true npm run dev

# Connection test
npm run status

# Re-run setup wizard
npm run setup

๐Ÿ“š Documentation

Getting Started

User Guides

Integration Guides

Developer Documentation

Deployment & Operations

๐Ÿ”ง Requirements

  • WordPress 5.0+ with REST API enabled
  • HTTPS recommended for production
  • User with appropriate permissions
  • Application Passwords enabled (WordPress 5.6+)

WordPress User Roles

Role Access
Administrator Full access to all functions
Editor Posts, pages, comments, media
Author Own posts and media
Contributor Own posts (drafts only)
Subscriber Read only

๐Ÿ“ฆ Installation Options

NPM Package

# Global installation
npm install -g mcp-wordpress

# Direct usage (recommended)
npx -y mcp-wordpress

Docker Images

# Latest version
docker pull docdyhr/mcp-wordpress:latest

# Specific version
docker pull docdyhr/mcp-wordpress:1.3.1

Distribution Channels

๐Ÿš€ Next Steps

Ready to transform your WordPress management?

  1. ๐Ÿ† Download DXT Extension - Easiest setup (2 minutes)
  2. โšก Try NPX Method - Power user setup (5 minutes)
  3. ๐Ÿ“š Explore All Tools - See what's possible
  4. ๐Ÿ’ฌ Join Discussions - Get help and share ideas

๐Ÿ™ Acknowledgments

Special thanks to Stephan Ferraro for the upstream project that inspired this implementation.


โญ Found this helpful? Give us a star on GitHub! โญ